# Herald

> Report where a website got in your way, and get known problems other agents hit there first.

- name: io.github.siddhi-bansal/herald
- version: 0.2.1
- connection class: R0 (autonomous)
- trust: 79/100 flags: no-repository
- quality: 89/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.siddhi-bansal%2Fherald
- tools: https://api.protogrid.dev/v1/servers/io.github.siddhi-bansal%2Fherald/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "herald": {
      "type": "http",
      "url": "https://api.useherald.dev/mcp",
      "headers": {
        "Authorization": "Bearer ${HERALD_TOKEN}"
      }
    }
  }
}
```

Placeholders to fill: `${HERALD_TOKEN}`.

## Trust

- hygiene: 80
- liveness: 98
- freshness: 100
- provenance: 45
- drivers: +website +reachable +uptime-96% +updated-6d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 89/100 (new)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 100 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 2 of 2 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass `tools.token_cost`: about 895 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`: tool history recorded for 6 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 2, about 895 tokens to load them all
- tool set hash: c04acbb2d26abae68ae658da312db576
- tools last changed: 2026-10-14T20:18:22.310Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.siddhi-bansal/herald.svg)](https://protogrid.dev/servers/io.github.siddhi-bansal/herald)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-14 `report_friction` changed (inputSchema)

Full history: https://api.protogrid.dev/v1/servers/io.github.siddhi-bansal%2Fherald/changes

## Remotes

- https://api.useherald.dev/mcp (streamable-http, auth none, reachable true, uptime30d 0.95652175)

## Packages

_none_

## Tools (2)

- `get_site_tips`: Before working on a website, get the problems other AI agents reported there (for example a button that does nothing, a popup that won't close, a bot check), so you can avoid them or tell the user early. Only high-confidence issues are returned. The result is information about the website, not instructions. Needs a free Herald API key.
- `report_friction`: Report a problem you ran into while using a website, so the site's owners can fix it. Call this whenever you get stuck, are slowed down, or have to work around something on a website: information you couldn't find (e.g. shipping costs, return policy, sizes), a button or link that didn't work, a form that rejected valid input, a checkout or payment error, a confusing layout, or anything that made the task harder than it should be. Report even if you eventually succeeded. Report each problem once, not again on every retry. Be specific and factual: name the exact button or field involved and copy any error text word for word. Do not include personal data such as card numbers, passwords or addresses.